جزئیات آسیب‌پذیری
CVE-2026-12290
Red Hat Enterprise Linux 10
Memory safety bug fixed in Thunderbird 152
CVSS 3.1
7.5بالا
شرح رسمی (انگلیسی)
Memory safety bug fixed in Thunderbird 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Firefox ESR 115.37, Thunderbird 152, and Thunderbird 140.12.
امتیازهای CVSS
| امتیاز | نسخه | منبع | بردار |
|---|---|---|---|
| 8.1بالا | 3.1 | CISA ADP / Vulnrichment (CISA-ADP) | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N |
| 7.5بالا | 3.1 | CVEProject cvelistV5 (CNA) (redhat-SADP) | CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H |
محصولات آسیب‌پذیر
| فروشنده | محصول | نسخه‌ها | منبع |
|---|---|---|---|
| Red Hat | Red Hat Enterprise Linux 10 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Enterprise Linux 10 | همه | CVEProject cvelistV5 (CNA) |
منابع و راهنماها
۳۰- https://bugzilla.mozilla.org/show_bug.cgi?id=2024852
- https://www.mozilla.org/security/advisories/mfsa2026-57/
- https://www.mozilla.org/security/advisories/mfsa2026-58/
- https://www.mozilla.org/security/advisories/mfsa2026-59/
- https://www.mozilla.org/security/advisories/mfsa2026-60/
- https://www.mozilla.org/security/advisories/mfsa2026-61/
- https://access.redhat.com/security/cve/CVE-2026-12290 vdb-entryx_refsource_REDHAT
- https://bugzilla.redhat.com/show_bug.cgi?id=2489210 issue-trackingx_refsource_REDHAT
- https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-12290.json x_sadp-csaf-vex
- https://access.redhat.com/errata/RHSA-2026:38506 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:36100 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:38751 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:27733 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:30846 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:27717 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:33445 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:36102 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:39428 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:37210 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:39141 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:36103 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:39142 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:36101 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:39706 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:39011 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:38753 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:37391 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:38750 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:27734 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:29940 vendor-advisoryx_refsource_REDHAT
هشدار CVEهای بعدی این محصولمحصول را دنبال کنید تا آسیب‌پذیری‌های تازه را در تلگرام بگیرید.
اطلاعات
- تاریخ انتشار
- ۱۴۰۵/۰۳/۲۶
- آخرین به‌روزرسانی
- ۱۴۰۵/۰۷/۲۹
- وضعیت
- منتشرشده
- صادرکننده (CNA)
- mozilla
پیش‌بینی بهره‌برداری (EPSS)
۰٫۳۹٪
احتمال بهره‌برداری در ۳۰ روز
۳۴٫۱٪
صدک (نسبت به همه‌ی CVEها)
ارزیابی SSVC (CISA)
- قابل خودکارسازی
- خیر
- وضعیت بهره‌برداری
- ندارد
- اثر فنی
- کامل
ضعف‌ها (CWE)
- CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer
- CWE-823Use of Out-of-range Pointer Offset